174 matches found
Ubuntu 5.10 / 6.06 LTS / 6.10 : firefox vulnerabilities (USN-428-1)
Several flaws have been found that could be used to perform Cross-site scripting attacks. A malicious website could exploit these to modify the contents or steal confidential data such as passwords from other opened web pages. CVE-2006-6077, CVE-2007-0780, CVE-2007-0800, CVE-2007-0981,...
openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-2699)
This update brings Mozilla Firefox to security update version 1.5.0.10. - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of memory corruption and we presume...
openSUSE 10 Security Update : seamonkey (seamonkey-2691)
This security update brings Mozilla SeaMonkey to version 1.1.1. http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It includes fixes to the following security problems : - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs wer...
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...
[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1336-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 22nd, 2007 http://www.debian.org/security/faq -...
Slackware 10.2 / 11.0 : mozilla-firefox (SSA:2007-066-03)
New mozilla-firefox packages are available for Slackware 10.2, and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-066-03. The text itself is copyright C...
CVE-2007-0996
The CVE-2007-0996 issue affects Mozilla Firefox versions before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8. The root cause is that child frames inherit the default charset from the parent window, enabling cross-site scripting (XSS) when using certain character sets (demonstrated ...
php security update
CentOS Errata and Security Advisory CESA-2006:0501-02 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Moderate: Red Hat Security Advisory: php security update
Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...
SUSE-SA:2006:024: php4,php5
The remote host is missing the patch for the advisory SUSE-SA:2006:024 php4,php5. This update fixes the following security issues in the scripting languages PHP4 and PHP5: - copy and tempnam functions could bypass openbasedir restrictions CVE-2006-1494 - Cross-Site-Scripting XSS bug in phpinfo...
Mandrake Linux Security Advisory : php (MDKSA-2006:074)
A cross-site scripting XSS vulnerability in phpinfo info.c in PHP = 5.1.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including 1 a large number of dimensions or 2 long values, which prevents HTML tags from being removed. CVE-2006-0996 Directory...
php security update
CentOS Errata and Security Advisory CESA-2006:0276 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Moderate: Red Hat Security Advisory: php security update
Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...
CVE-2006-0996
Cross-site scripting XSS vulnerability in phpinfo info.c in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including 1 a large number of dimensions or 2 long values, which prevents HTML tags from being removed...
CVE-2006-0996
The CVE-2006-0996 issue is a cross-site scripting vulnerability in PHP’s phpinfo output that allows remote attackers to inject script/HTML via long array variables. Publicly disclosed in PHP 5.1.2 and 4.4.2, the flaw arises from inadequate sanitization of long strings, enabling XSS in pages that ...
[Full-disclosure] phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2
Source: http://securityreason.com/achievementsecurityalert/34 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpinfo Cross Site Scripting PHP 5.1.2 and 4.4.2 Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 26.2.2006 - -Public: 8.4.2006 from SecurityReason.Com CVE-2006-0996 - ---...
Ultraseek Web Server Detect
Ultraseek Web Server is running on this host. Ultraseek has been known to contain security vulnerabilities ranging from Buffer Overflows to Cross Site Scripting issues. OpenVAS Vulnerability Test $Id: ultraseekdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Ultraseek Web Server Detect...
CVE-2005-0996
CVE-2005-0996 involves multiple SQL injection vulnerabilities in the Downloads module of PHP-Nuke 7.6. The issue allows remote attackers to inject arbitrary web script or HTML via: (1) email or url parameters in Add, (2) min parameter in viewsdownload, and (3) min parameter in search. Affected pr...
CVE-2005-0996
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the email or url parameters in the Add function, 2 the min parameter in the viewsdownload function, or 3 the min parameter in the search function...
